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CONTROL UNIT FOR A SYSTEM 
AND A METHOD OF OPERATING A CONTROL UNIT 

Field Of The Invention 

The present invention relates to a controller for a system and a method of operating 
the controller. 

Background Information 

A diagnostic device for an engine control unit is known from International 
Published Patent Application No. WO 97/13064, which describes various diagnostic 
function modules that are activated by a scheduler. The diagnostic function 
modules check the systems required for the operation of the engine. The scheduler 
can block certain diagnostic function modules when the diagnostic function module 
can be expected to indicate a fault on the basis of faults already discovered. 

Summary Of The Invention 

The control unit according to the present invention for a system and the method 
according to the present invention for operating a control unit have the advantage 
over the related art that the cross-dependencies between running modules are taken 
into account in activating additional modules. Since the information on the cross- 
dependencies is provided in a first storage device, this information is compiled 
centrally. Therefore, additional modules can easily be added or removed again. The 
mutual dependencies among the modules can be taken into account especially easily 
for all modules owing to the central storage. This is especially important when 
calling up a certain module which observes system states that are interfered with by 
other modules. In such a case, faulty information can be generated due to the 
observation of interfered with states. 

It is especially easy to prevent activation of the additional module or to deactivate a 
module that has already been activated. In the first storage device, only the cross- 
dependencies between the modules or, in addition, information about disturbances 
in states of the system and/or observation of states of the system can be stored by 



the above-mentioned modules. The modules and the scheduler can be implemented 
especially easily as a software program for a microprocessor. Tables or matrices in 
the memory of the control unit are expediently used as storage devices. 

Brief Description Of The Drawings 

Figure 1 shows a control unit and the system according to the present invention. 

Figure 2 shows an arrangement of the information in a first storage device 
according to the present invention. 

Figure 3 shows another arrangement of the information in the first storage device 
according to the present invention. 

Figure 4 shows a flow chart corresponding to a method according to the present 
invention. 

Detailed Description 

Figure 1 shows a control unit 1 which is connected by connecting lines 4 to a 
system 2 to be controlled. Control unit 1 has a microprocessor 3 which is provided 
for processing modules 10, 11, 12. Of the modules shown here, module 10 is a 
function module, module 1 1 is a diagnostic module, and program module 1 2 is 
designed as the scheduler. 

System 2 may be any technical system that is controlled by a control unit 1 . For 
example, system 2 may be a motor vehicle, an internal combustion engine, or a 
transmission. Such a system 2 is equipped with a plurality of sensors and a 
plurality of actuators. Control information generated by control unit 1 can be 
transmitted over connecting lines 4 to the actuators of system 2 (arrow pointing to 
system 2). In addition, values measured by sensors of system 2 can be transmitted 
over the connecting lines to control unit 1 (arrow pointing to control unit 1). 
Control unit 1 thus receives information about states of system 2, which is 
processed by control unit 1 and converted to control information for the system 2 
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in accordance with the desired states (for example, the gas pedal position in the 
vehicle). 

Control unit 1 is represented here only schematically by multiple modules 10, 11, 
5 12 and microprocessor 3. Other hardware components with which those skilled in 

the art are familiar are not shown. Modules 10, 11, 12 are usually designed as 
program modules, but hardware components that perform certain functions can also 
be used. A program module is a sequence of program commands which can be 
activated or deactivated as a unit by a scheduler. Functions which appear as a unit 
10 to the user or are used to control a uniform function can be divided into multiple 

modules administered separately by the scheduler 12. In addition, only a single 
function module 10, a single diagnostic module 11 and a single scheduler 12 are 
shown. A plurality of corresponding modules 10, 11 are of course provided to 
perform complex control and diagnostic functions. The function modules 10 are 
15 necessary for processing the immediate control functions, i.e., they analyze sensor 

information of system 2 and generate corresponding control information for system 
2 according to predetermined setpoints. With a motor vehicle, for example, the 
input signal of such a function module 1 0 may be the rpm, and the setpoint 
information may be the gas pedal position, for which corresponding control 
'20 information for the engine is then generated. Diagnostic modules 1 1 have the 

function of monitoring the proper functioning of system 2. Because of statutory 
regulations, for example, the functioning of the catalyst in a motor vehicle must be 
checked during ongoing operation. This is done by activating from time to time a 
diagnostic module 1 1 which checks the function of the catalyst by analyzing the 
25 signals of the lambda probe. 

Function modules 10 and diagnostic modules 1 1 may be in an active state or an 
inactive state. In the inactive state, the functions associated with the modules 10, 
11, such as diagnosis or control of parts of the system, are not carried out. This 
30 means in particular that inactive modules 10, 11 do not receive any data from the 

system 2 and do not output any information to system 2. In the inactive state, 
however, the modules 1 0, 1 1 can still exchange information with the 
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microprocessor 3; in particular, it must be possible to exchange information 
concerning activation of a module (e.g., the possibility of or a request for 
activation) between the modules 10, 11 and the scheduler 12. Not all modules 10, 
1 1 are needed in all operating states of system 2, so at least some of these modules 
10, 11 may be in an active or an inactive state. Individual function modules 10 or 
diagnostic modules 1 1 are activated by a sequence control that decides which 
function modules 10 or diagnostic modules 11 are to be executed. Scheduler 12 is 
part of this sequence control. The sequence control can make the activation of 
individual function modules 10 or diagnostic modules 11 dependent upon certain 
external conditions. For example, function modules 1 0, which are associated with 
the ignition or injection of a gasoline engine, are activated as a function of the 
crankshaft position of the engine. Likewise, diagnostic modules 1 1 are activated as 
a function of operating states of system 2. Multiple function modules 10 and 
multiple diagnostic modules 1 1 can be processed in parallel, in the sense that the 
processing of one module is not yet concluded while another module is also being 
processed at the same time. One problem with this is that certain modules supply 
faulty information when certain other modules 10, 11 are activated at the same 
time. For example, activated carbon filters are provided with modern vehicles to 
prevent vaporized hydrocarbons from the tank from entering the environment. Then 
for a limited period of time in ongoing operation of the engine, air is taken in 
through this activated carbon filter, and the hydrocarbons present in the filter are 
burned in the engine, so that the filters are cleaned again by this measure. 
However, this is associated with interference in the lambda probe signal, so that 
diagnosis of the catalyst is impossible during the cleaning of the activated carbon 
filter. Thus, diagnostic module 1 1 for checking the catalyst must not be activated 
while function module 10 for cleaning the activated carbon filter is activated. In 
addition, function modules 10, e.g., for carburation, are also interfered with during 
this cleaning. 

To take into account this cross-dependency between the modules 10, 1 1, the present 
invention calls for a scheduler 12 which takes these cross-dependencies into 
account by analyzing storage device. Figure 2 shows the content of a first memory 



4 



to which the scheduler has access. X, Y and Z in Figure 2 denote physical states of 
the system 2 which have an influence on sensor signals of the system 2. Column I 
lists three different states of system X, Y and Z. These system states are either 
influenced or observed by program modules, labeled here as A, B, C and D. 
Furthermore, a module may observe a state and influence it at the same time 
(module D appears in column II and III). When a module influences a state in such 
a way that other modules observing this state supply faulty results because of this 
influence, this is interference between these modules which comes about indirectly 
due to interference in a state by at least one of the modules. For example, when a 
state is needed as a necessary parameter for a calculation by a module, a 
misdiagnosis or faulty control pulses may occur due to interference with other 
modules. 

Column II lists the modules which observe the corresponding states, and column III 
lists the interfering modules. State X, for example, is observed by program modules 
A and B and is interfered with by program module C. State Y is observed by 
module A and interfered with by module B. State Z, for example, is observed only 
by module A and is not interfered with by any module. When module A is to be 
activated, scheduler 12 accesses the tables shown in Figure 2 and ascertains that 
module A observes state X, state Y, and state Z. Since states X and Y are 
interfered with by modules C and B, module A is enabled for activation only if 
modules C and B are not activated. In addition, module A also observes state Z, 
which is not, however, influenced by any other module. This could be useful for 
expansion of the control unit; in particular, other modules which might have an 
influence on state Z can easily be entered in the table created in Figure 2. 

The information stored in Figure 2 can be stored in any storage device or in any 
other form, e.g., as a matrix. It is essential only that a storage device be provided 
on the basis of which it is possible to determine which modules have cross- 
dependencies, i.e., which modules must not be activated simultaneously on the 
basis of existing cross-dependencies. It is also important that function modules 10 
or diagnostic modules 1 1 can be added to or removed from the control unit 1 easily 
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by deleting or adding the individual modules and making a suitable entry in the 
storage device. In addition, complicated cross-dependencies between different 
modules can thus be taken into account in a very clear way. 

The table shown in Figure 2 contains an excess of information, or a certain 
redundancy, inasmuch as only columns II and III are actually needed to determine 
cross-dependencies between the modules. The reason for column I is that it makes 
reconstruction of the cross-dependencies especially simple. This simplifies the 
addition of new modules, because it is usually known which states a new module 
needs (column II) and which states a new module interferes with (column III). 
Thus, as an alternative, only columns II and III may be stored in the first storage 
device. Figure 3 shows a corresponding representation. The representation in Figure 
3 shows the same information as columns II and III in Figure 2 in a different 
representation. Column IV lists the modules, and column V lists the interfering 
modules. Figure 3 shows that module A is interfered with by modules B, C and D, 
module B is interfered with by module C, module C is not interfered with by any 
other module, and module D is interfered with by module B. The table according 
to Figure 3 may be part of the fixed program, or it may be created in initialization 
the computer. According to the table in Figure 3, two modules interfere with one 
another when at least one of the modules is entered in column IV and the other is 
entered in the same line in column V. 

Figure 4 shows schematically an example of the program sequence of scheduler 12 
which accesses the information according to Figure 2. In a first program step 101, 
a request is sent to the scheduler 12 for a certain module, e.g., module A here, to 
be processed in accordance with a state of system 2 or another condition, such as 
the fact that a certain period of time has elapsed. A subsequent program step 1 02 
determines which states are observed by module A (states X, Y and Z) by polling 
the first storage device, as shown in Figure 2. Another subsequent program step 
103 determines which modules (B, C, D) interfere with these states (X, Y and Z). 
In addition, step 102 determines by polling the first storage device which states are 
interfered with by module A (none here). Program step 103 also checks to see 



which modules are observing the states so determined. Then by polling additional 
storage device, a subsequent program step 104 determines which of these modules 
which are interfered with by A or are in turn interfering with A (modules B, C, D) 
are currently active, and then on the basis of this information, a subsequent step 
5 105 decides whether module A may be activated. If no interfering module (B, C, 

D) is active, and if no activated module is interfered with by activation of A, then 
the activation of module A is enabled so that module A is processed. Then another 
program step 106 notes in the second storage device that module A is activated. 
Various options are conceivable if a conflict with other modules that have already 

10 been activated occurs due to activation of module A. For example, scheduler 12 

may then refuse to activate module A in step 105, so that module A would have to 
try again to report to the scheduler 12 at a later time. Another possibility is for 
scheduler 12 to decide in step 105 to inactivate an interfering module and then 
allow activation of module A. This can be decided, for example, on the basis of 

15 priorities assigned to the individual modules. In subsequent program step 106, the 

information regarding which modules are currently activated is then stored. 
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What Is Claimed Is : 



1 . A control unit for a system having a plurality of activatable modules for 
generating information as a function of at least one of a plurality of states of the 
system, comprising: 

a first storage device for storing information relating to a mutual 
interference of the modules; 

a second storage device for storing information indicating which modules 
are activated; and 

a scheduler for activating at least one of the modules and determining as a 
function of the information stored in the first storage device and the information 
stored in the second storage device whether the mutual interference occurs if an 
additional module is activated, wherein the scheduler prevents a simultaneous 
activation of modules that interfere with each other. 

2. The control unit according to claim 1, wherein the system includes one of a 
motor vehicle, an engine, and a transmission. 

3. The control unit according to claim 1, wherein the scheduler prevents the 
simultaneous activation of modules that interfere with each other by preventing an 
activation of the additional module. 

4. The control unit according to claim 1, wherein the scheduler prevents the 
simultaneous activation of modules that interfere with each other by interrupting an 
activated module and activating the additional module after the activated module is 
interrupted. 

5. The control unit according to claim 1, wherein the first storage device stores 
information regarding which modules interfere with one another when they are 
simultaneously activated. 



6. 



The control unit according to claim 1, wherein the first storage device stores 



information regarding which states of the system correspond to which activated 
modules and which states of the system are interfered with by which activated 
modules. 



7. The control unit according to claim 1, wherein each one of the modules and 
the scheduler includes a program to be processed by a microprocessor. 

8. The control unit according to claim 1, wherein each one of the first storage 
device and the second storage device includes one of a plurality of tables and a 
plurality of matrices. 

9. The control unit according to claim 1, wherein one of a set of functions 
appearing to a user as one unit and another set of functions being used to control a 
uniform function is divided into the modules and are managed separately by the 
scheduler. 

1 0. A method of operating a control unit of a system for activating at least one 
of a plurality of modules in order to generate information regarding at least one of 
a plurality of states of the system, comprising the steps of: 

providing a first storage device for storing information relating to a mutual 
interference of the modules; 

providing a second storage device for storing information indicating which 
modules are activated; 

before an activation of an additional module is performed, determining as a 
function of the information stored in the first storage device and the information 
stored in the second storage device whether the mutual interference occurs if the 
additional module is activated; and 

preventing a simultaneous activation of modules that interfere with each 

other. 

11. The method according to claim 10, wherein the system includes one of a 
motor vehicle, an engine, and a transmission. 



12. The method according to claim 10, wherein the step of preventing the 
simultaneous activation of modules that interfere with each other includes the step 
of preventing an activation of the additional module. 

13. The method according to claim 10, wherein the step of preventing the 
simultaneous activation of modules that interfere with each other includes the steps 
of interrupting an activated module and activating the additional module after the 
activated module is interrupted. 

14. The method according to claim 10, wherein the steps of the method are 
executed by a program to be processed by a microprocessor. 
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Abstract Of The Disclosure 
A control unit for a system and a method of operating a control unit have modules 
that are activated. Before activation of a certain module, inquiries are made to 
detect cross-dependencies with other modules that have already been activated. To 
do so, a first storage device and a second storage device containing this information 
are provided. A scheduler prevents modules which interfere with one another from 
being activated simultaneously. 
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As a below named inventor, I hereby declare that: 
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I believe I am the original, first and sole inventor (if only one name is listed 
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CONTROL UNIT FOR A SYSTEM AND A METHOD OF OPERATING A 
CONTROL UNIT" the specification of which: 
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[ ] was filed as United States Application Serial No. on 
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applicable). 

[ ] was filed as PCT International Application Number , on the 
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§ 1.56(a). 
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I hereby claim the benefit under Title 35, United States Code § 120 of any 
United States Application or PCT International Application designating the United States of 
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first paragraph of Title 35, United States Code § 1 12, I acknowledge the duty to disclose 
material information as defined in Title 37, Code of Federal Regulations § 1.56(a) which 
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application or any patent issuing thereon. 



Richard L. Mayer, Reg. No. 22,490 
Gerard A. Messina, Reg. No. 35,952 
, Reg. No. 



, Reg. No. 



, Reg. No. 



All correspondence should be sent to: 



Page 3 of 12 



Full name of inventor Rudi MAYER 
Inventor's signature 



Citizenship Federal Republic of G ermany 

Residence Laerchenweg 28 

71665 Vaihingen 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 4 of 12 



Full name of inventor Hoker BELLMANN 



Inventor's signature _ 



Citizenship Federal Republic of Germany 

Residence Adolf-Gesswein-Str. 4 

71636 Ludwiesburg 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 5 of 12 



Full name of inventor Gudrun MENRAD 

Inventor's signature . . Date _ 



Citizenship Federal Republic of Germany 

Residence Heeelstr. 10 

70174 Stuttgart 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 6 of 12 



Full name of inventor 
Inventor's signature _ 



Dieter-Andreas DAMBACH 
Date 



Citizenship Federal Republic of Germany 

Residence Immanuel-Kant-Str. 10 

70825 Korntal-Muenchineen 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 7 of 12 



Full name of inventor Jiirgen WOLF 
Inventor's signature 



Citizenship Federal Republic of Germany 

Residence Rechts Per Alb 30 

76199 Karlsruhe 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 8 of 12 



Full name of inventor 



Rainer FRANK 



Inventor's signature 



Citizenship Federal Rep ublic of Germany 

Residence An Per Steige 36 

74343 Sachsenheim 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 9 of 12 



Full name of inventor Hans HILLNER 
Inventor's signature 



Citizenship Federal Republic of Germany 

Residence Rintheimer Str. 15 

76131 Karlsruhe 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 10 of 12 



Full name of inventor 



Juergen SCHIEMANN 



Inventor's signature _ 



Citizenship Federal Republic of Germany 

Residence Eichenweg 9 

71706 Markgroeningen 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 1 1 of 12 



Full name of inventor 



Georg MALLEBREIN 



Inventor's signature 



Citizenship Federal Republic of Germany 

Residence Kniebisstr. 19 

78224 Singen 

Federal Republic of Germany 

Post Office Address Same As Above 



Page 12 of 12 



express ma: 




CERTIFICATE 



"EXPRESS MAIL" MAILING LABEL NUMBER 



EM360387894 



DATE OF DEPOSIT 



7/17/9 8 



TYPE OF DOCUMENT PATENT APPLICATIO OF MA YER ET AL 



SERIAL NO. 



FILING DATE 



HEREWITH 



I HEREBY CERTIFY THAT THIS PAPER OR FEE IS BEING DEPOSITED WITH 
THE UNITED STATES POSTAL SERVICE "EXPRESS MAIL POST OFFICE TO 
ADDRESSEE" SERVICE UNDER 37 CFR 1 . 10 ON THE DATE INDICATED ABOVE, 
BY BEING HANDED TO A POSTAL CLERK OR BY BEING PLACED IN THE EXPRESS 
MAIL BOX BEFORE THE POSTED DATE OF THE LAST PICK UP, AND IS 
ADDRESSED TO THE ASSISTANT COMMISSIONER FOR PATENTS, WASHINGTON, 
D.C. 20231. 



(TYPED OR PRINTED NAME OF PERSON MAILING PAPER OR FEE) 




(SIGNATURE OF PERSON MAILING PAPER OR FEE) 

TITLE: CONTROL UNIT FOR A SYSTEM AND A METHOD OF OPERATING 
A CONTROL UNIT 



BORIS POLANCO 



